ID de Prueba:	1.3.6.1.4.1.25623.1.0.104607
Categoría:	Denial of Service
Título:	Apache Log4j 1.x DoS Vulnerability (Mar 2023)
Resumen:	Apache Log4j is prone to a denial of service (DoS); vulnerability.
Descripción:	Summary: Apache Log4j is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: When using the Chainsaw or SocketAppender components an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized. Affected Software/OS: Apache Log4j versions 1.x on Java Runtime Environment (JRE) less than 1.7. Solution: No solution was made available by the vendor. Note: Apache Log4j 1.x reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-26464 https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.